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REMARKS 

In the non-final Office Action, the Examiner objects to the oath/declaration and rejects 
claims 1-32 undci .'5 V S C § lO^ia) ;sa uiipateniahlc ^.^es Bn\XnTT ef al, (Quantum 
Ci"\ptograpUy Public Kc>' Disuibuuon and Coin '[(.i.ssiny. iTUetnaUonai t'onfercacc on Compute!- 
Systems & Sii^nal Processing, Bangalore India, 10-12 Dec. 19S4) in s iew of Lfc'E R'.S. Patent No. 
5,535,195) and BASS ei ai. (U.S. Patent No. 4,649,233). Applicants tespecifoiiy traverse the 
objection aiid rejection, * 

The declaration has been objected to as being defective because the signature of the first 
named inventor is found in the box intended for the second named inventor and because the 
dedatation does not identify the mailing address of each inventor. In response. Applicants submit a 
nevi,' declaration herewith. As such, withdrawal of the objection to the declaration is respectfiiliy 

requested. 

Claims 1-32 stand rejected under 35 U.S.C. § i 03(a) as allegedly unpatentable over 
BENNE'H' et al. in view of LEE and BASS et al Applicaiits respect&Uy traverse this rejection. 

Independent claim 1 reciies a metliod of trajisporting a random block of bits in a quantum 
cryptographic key distribution (QKD) network. The method includes sharing blocks of bits 
between nodes in a QKD network using quantum cryptographic mechanisms; determining a key 
transport patit between a source node and a destination node in the QKD network, wherein the key 
transport path comprises one or more intermediate nodes; at each intermediate node of the one or 
more intennediate nodes, logically combining a block of secret bits shared with a previous hop 
aiong the path with a block of secret bits shared with a next hop along the path to produce first 
combined blocks of bits; at the destination node, logically combining a block of secret bits shared 
with a previous hop along tire path with a random block of bits to produce a second combined block 



' As Applicarils ' remarks with respect to ibe Exaniiuer s rejections are sufficient to oveiicome these rejeclioiis, 
AppSicarus' sileace as to assertions by the Exaimner i» the Office Action or ceriaiii reqwiremeiits thai may be appitcable 
io such rejedfotis (e.g., whether a reference coostitotes prior art, tnotivation to combiae reference, ^serdons as lo 
dependent claijas, etc.) is not a coacessioo by Appltcaats that sach assertions are accurate or such requirements Ijave 
been met, aiid Appltcaiits reserve the right to analyze and dispute such assertions/requirenients in the fwfttre. 
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of bits; recei ving the first combined biocks of bits and the second combined block of bi ts at the 
source node; and logically conabining, at the source node, the first combined blocks of bits and the 
second combined block of bits to determine the random block of bits. BENNETT et al, [.EE, and 
BASS et al., whether taken alone or in any reasoaabie combination, do not disclose or suggest this 
combination of features. 

For exanip!t% BENNETT et a!., LEE, and BASS et al. do not disclose or suggest logically 
combining a block of secret bits shared with a previous hop along a path witli a block of secret bits 
shared with a next hop along the path to produce first combined blocks of bits at each intermediate 
node of one or more intenviediate nodes; at the destination node, logically combining a block of 
secret bits shared with a previous hop along the patit with a random block of bits to produce a 
second combined block of bits; receiving the first combined blocks of bits and the second combined 
block of bits at the source node; and logically combining, at the source node, tire first combined 
blocks of bits and the second combined block of bits to detemiiiie the random block of bits. Tlie 
Examiner admits that BENNETT et al. and E.EE do not disclose these leatttres and relies on column 
6, lines 55-67 of BASS et al as allegedly disclosing these features (Office Action, pp. 3-4). 
.Applicants respect! uily disagree with the Examiner's interpretation of BASS et al. 

At column 6, lines 55-67, BASS et al. discloses: 

where is addition modulo 2'^"' and where R1 * R2* R3* R4 represents a set of secret random 
numbers contributed by counteqjart nodes. The fact that each node contributes its own random 
number in generating session keys ensures that session key generation scenarios cannot be "faked" 
by impostor nodes. This arises where the impostor nodes merely replay recordings of a previous key 
generadon scenario. 

The Rr values are exchanged over the network just prior to the generation of the session key. In tJiis 
regard J each node obtains a secret random number from each other node, niustratively, suppose that 
there were only two nodes itivolveds x atrd y, and *KNCO is stored at x and *KNC1 is stored at y. 
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I his sectjon oi BASS et a! , discloses that each of a plurality of nodes contxibules its owti 
random number in generating session keys, which ensures that session key generation scenarios 
cannot be "faked" by impostor nodes. This section of BASS et al. further discloses that the random 
numbers are exchanged over the net\iork just prior to fhe generation of the session kev, so each 
node obiaiiis a seciet tandom nun tK,in cath ^ i w^ node Thi". wtKvn of R \SS et al nictely 
diScio<ies contiibutmii jandom numbv.'iii uhci; e^tabl!>bing session kdvs, noi loiiicalh combinmii a 
blt'ck of societ bib .4n»ed u tth a iou6 iiop along a paih wnh a biotk of .secret btts shateti with a 
next hop along the patli to produce first combined blocks of bits at each intermediate mde of one or 
more intermediate nodes; at the destination node, logically combining a block of secret bits shared 
with a previous hop along the path with a random block of bits to produce a second combined block 
of bits; receiving tlie first combined blocks of bits and the second combined block of bits at the 
source node; and logically combining, at ihe source node, the first combined blocks of bits and the 
second combined block of bits to detennine tiie landom block of bits, as recited in claim 1 . 

For at least the tbregoing reason. Applicants submit that claim i is patentable over 
BENNETT et al, LEE, and BASS et al,, whether taken alone or in any reasonable combination. 

Claims 2-<> depend from claim 1. Therefore, these claims are patentable over BENNErT et 
al, LEE, and BASS et al, whether taken alone or in any reasonable combination, for at least the 
reasons given above with respect to claim L 

I ndependent claim 7 recites a method of end-to-end transport of a secret key in a quantum 
cryptographic key distribution (QKD) network. The method includes determining multiple paths 
for end-to-end transport, employing QK D techniques, of the secret key across a QKD network; and 

transporting the secret key across each of the determined multiple paths. B ENNETT et al, LEE, 
mid BASS et al, do not disclose or suggest this combination of features. 

For example, BENNETT et al., LEE, and BASS et al. do not disclose or suggest determining 
multiple paths for end-to-end transport, employing QK D techniques, of the secret key across a QKD 
network; and transporting the secret key across each of the detennined multiple paths. The 
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I admits that Bi Wl 1 1 ei a! and LLh do m>t disclose this combmation of feaiiues and 

rehes on column 6, lines 45-50 of BASS et at as a! bgedly disclosing these featiires (Office Action, 
pg. 7). Applicants respectfully disagree with the Examiner's kvteipretation of BASS et al 

At coluim 6, lines 45-50, BASS et a!, discloses: 

Although tl>e following example references two-node interconnection, the method of session key 
generation contemplates any number of nodes partici pating. T hus, i rrespective of the number of 
nodes involved, all nodes should generate the same session key. The session key is defined hy. . . 

This section of BASS et al, discloses that, irrespective of the number of nodes involved, all 
nodes should generate the same session key. This section of BASS et al does not mention a secret 

key, let alone detenniniiig multiple paths for end-to-end transport, employing QKD teGhniques, of 
the secret key across a QKD network; and transporting the secret key across each of the determined 
multiple paths, as recited in claim 7, 

For at least the foregoing reason, Applicants submit that ciahn 7 is patentable over 
BENNETT et al, LEE, and BASS ei al., whether taken alone or in any reasonable combination. 

Claims S-13 depend from claim 7, Therefore, these claims are patentable over BENNETT et 
al., LEE, and BASS et aL, whether taken alone or in any reasonable combination, for at least the 
reasons given above with respect to claim 7. 

Independent claim 14 recites a method of transporting a key between a first node at one end 
of a path thiough a quantum cr\,ptogiaph5c kej distribution (QKD) network to a second node at an 

oppo-itc 0!ui o! the path the QKD uetwosk Lcnipn^iug .5 phirahu of nodes 1 be Tuclbod mcludes 
^!a^^mittnll; Nt'tjot bits hct\\cest ihc pknalit\ of nodes of tiie QkD neinuik ubsnu quantum 
L-nptoyTdphiL nk'K.ihHnnns tesenini.' tnm\ the Inst node pi-^itions oi ihe uansmutL-d se^-iet bus at 
each intcimediatc node along the path between the fir^t and the second node and tianspostnig a key 
between the second node and the first node using the reservx'd portions of the transmitted secret bits. 
BENNETT et al, LEE, and BASS et al. do not disclose or suggest this combination of features. 



5 



\ ypW mou \n h» s<. > -f') DocketNo.: BBNT~P<)l-258 

RepKioulhce V^twiu'i sepieoik, ft ifxr 

I oj exaiupit; Bl NNL 11 et ai, IM , and BASS et ai. do not disclose or suggest reserving, 
from a fnst node, ponions of a uansmttted seciet bus at each intermediate node along the path 
between the first and the second node; and transpordng a key between the second node and the first 
node using the reserved portions of the transmitted secret bits. The Examiner admits that 
Rf-\\f IT ei al and f f I do nut dfec^'so 'hc-->. ouu'o-- ard iv.^ on column 6 hne^ 4^-5'^ and 
column 7, lines 43-55 of BANS et ai a.s ailegediv dsscbsmg the^e feaiuies ((>ffice Action, pg 
AppHcants respectfully disagree with the Examiner's inten>retation of BASS et al 

Column 6, iinos 4^-5^ ha\c been reproduced abo\ c 1 his section of B V'sS et ai discloses 
that, irrespective of the number of nodes involved, ail nodes should generate the same session key. 
This section of BASS et al. does not mention secret bits, let alone reserving^ from a first node, 
portions of a transmitted secret bits at each intermediate node along the path between the first and 
the second node; and transporting a key between the second node and the first node using the 
reserved portions of the transmitted secret bits, as recited in claim 14. 

At colnmii 7, lines 43-55, BASS et al discloses: 

For each node, (he "last terra" of both the R„ and PWF„ sitmrnations represents the random number 
vahie and user ID/password values of tlie local node. Also, ibr ii>2, a unique cross-domain pair is 
shared for each pair of nodes. Consequently, a compromise of one node does not operate to 
compromise the entire systeai. 

In tlie ensinng description, there is first set out a set of tempora! and spatial definitions tised in the 
exampie of the method of this invention. In this regard, the principal actions of the nietliod are 
distributed over a timeline. The.se actions are symroetrtc .such that each node mirrors the activity at 
the other node. 

Ihis section o: B \Sn ef :il ci-^lo-es 'hat <■ !U^^)l;e !.L.>ss-doinatn pan is shaied toi each pau 
of Hodes. so a coinpiumisc of one node docs not operate to compromise the entire s\stem, ( his 
section of BASS et al. further discloses tiiat tiie actions of the nodes are symmetric such that each 
node mirrors tlie activity at the other nodes. This section of BASS et al. does not mention secret 
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bus iei ak)iie leseix inj^, tr<m\ a first node, poitions of a ttansmitted secret bits at each inlermediate 
node along the path betW'-een the first and the second node; and transporting a key between the 
second node and the first node using the reserved portions of the transmitted secret bits, as recited in 
claim 14. 

For at least the foregoing reason. Applicants submit that claim 14 is patentable over 
BENNETT et a!,, LEE, and BASS et al., whether taken alone or in any reasonable combination. 

Claims 1 5-22 depend from claim 14, Therefore, these claims are patentable over BENNETT 
et al, I-EE, and BASS et al., whether taken alone or in any reasonable combination, for at least the 
reasons given above with respect to claim 14. 

Independent claim 23 recites a computer-readable medium contatnuig instructions for 
controlling at least one processor to perfomi a method of transporting a key across a quantum 
cryp{x>graphic key distribution (QDK) network. The method includes reserving portions of key 
sy-mbols, transmitted between nodes in the QKD network via quantum cryptographic mechanisms, 
at each node along a path across the QKD network; and using the reserved portions of the 
transmitted key symbols to determine an encryption key for encrypting data sent between nodes at 
either end of the path. BENNETT et al., LEE, and B,4,SS et al, whether taken alone or in any 
reasonable combination, do not disclose or suggest this combination of features. 

For example, BEN NETT et al, I,EE, arid B ASS et aL do not disclose or suggest reserving 
portions of key symbols^ transmitted between nodes in the QKD network via quantum 
cryptographic mechanisms, at each node along a path across tlie QKD network; and using the 
reserved portions of the transmitted key symbols to determine an encryption key for encrypting data 
sent betv^'een nodes at either end of the path. The Examiner does not address these features when 
rejecting claim 23 (Office Action, pg. 11), thus a prima facie case of obviousness has not been 
established with respect to claim 23. 
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l or ai ieasi the tbregomg reason, Apphcants siibinitthat claim 23 is patentable over 
BENNEIT et al , LfcE, and BASS et al., whethei taken alone or in any reasoaable combmatioa. 

Claim 24 recites a node at a first end of a patit in a quantum cryptographic key distribution 
(QKD) network that inchides processing logic configured to: reser\'e portions of key symbols, 
tiansmitted between nodes ui the QKD netw-ork \ la quantum crv-ptographic mech. nisms at each 
nodt \\<m> spuhtKfo ■^ thi, QkD na\\oik ^tnd one inotc intctl Kts con(i_itud io iLcen^ ilie 
its^iwd pouiou^ of ki.\ •i\mk)K tht pio<.es>!Uj; logit ftiithei configuted to use ibe Tt. ^<.t\ ed 
portion ot the tran mnt^d ki.\ s\mboK to d<.iun uk ai encrvption Us toi tnLuptniL dui \cnt to 
another node ai a econd end ot ihe path Bi NNI 11 tt al , I !: I and BASS ei al w heiher takei 
alone or in any reasonable combination, do not disclose or suggest this combination of features. 

For example, BENNETT et al, LEE, and BASS et al. do not disclose or suggest processing 
logic configured to: reserve portions of key symbols, transmitted between nodes in the QKD 
network via quantum cr>^tographic mechanisms, at each node along a patli across the QKD 

network, and one or more interfaces configured to. receive the reserved portions of key symbols, the 
processing logic lurther covrfigured to: use the reserved portions of the transmitted key symbols to 
determine an encrv ption key for encrypting data sent to another node at a second end of the path. 
The Examiner relies on column 6, lines 45-65 and column 7, lines 43-55 of BASS et al as allegedly 
disclosing these features (Office Action, pp. 9 and 1 1). Applicants respectfiiUy disagree widi the 
Examiner's interpretation of BASS et al. 

Column 6, lines 45-65 of BASS et al, have been reproduced above. This section of BASS et 
al, discloses that each tjode contribiites its own random mmiber in generating session kc\'s This 
t,ect(on ot BASS et a!, does not disclose or suggest processing logic configured to; reser\e portions 
oS kev s\inbol<:, trriiisniitted between nodes in the QKD network \ ia qnantum trvptos^taphic 
ineehaniMiis, at each node aiong a path across the QK.D netw ork, and oae or more inierfaees 
configured to: receive tlie reserved portions of key symbols, the processing logic turther configured 
to; use the reserved portiom of the transmitted key symbols to determine an encryption key for 
encrj'pting data sent to another node at a second end of the path, as recited in claim 24, 
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( olumn 7, hnes 43-55 of iJASS ei al. have been reproduced above. This section of BASS et 
ai. discloses that a unique cross-domain pair is shared for each pair of nodes, so a compromise of 
one node does not operate to compromise the entire system. This section of BASS et al. further 
discloses that the actions of the nodes are symmetric such that each node mirrors the activits' at the 
other iiodes. This section of B.4SS et al does not disclose or suggest processing logic configured 
to: reserve portions of key symbols, transmitted between nodes in the QKD network via quantum 
cryptographic mechanisms, at each node along a path across the QKD network, and one or more 
interfaces configured to: receive the reserved portions of key symbols, the processing logic further 
configured to: use the reser\'ed portions of tiie transmitted key symbols to determine an enciyption 
key for encrypting data sent to another node at a second end of tlie path, as recited in claim 24. 

The disclosures of BENNETT et al . and LEE do not remedy the deficiencies in the 
disclosure of BASS et al. set forth above. 

For at least the foregoing reasons, Applicants submit that claim 24 is patetitable over 
BENNETT et al, LEE, and BASS et al, whether taken alone or in any reasonable combination. 

Independent claim 25 recites a method of employing blocks of secret bits in communicating 
between a source node and a destination node in the network. The method includes transraitting the 
blocks of secret bits between each node along a path between the source node and the destination 
node using quaitum cryptographic mechanisms, wherein a difierent block of secret bits of the 
blocks of secret bits is transmitted between each different hnk that connects each node along the 
path; initiating a reservation process, at the source node, the reservation process reserving at least a 
portion of the blocks of secret bits at each node along a path between the source node and the 
destination node; and employing the resen-ed blocks of secret bits in subsequent public 
commonication between the soiu"ce node and the destination node, BENNETT et a! LEE, and 
BASS et al, whether taken alone or in my reasonable combination, do not disclose or suggest this 
combination of features. 
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For example, BENN ETT ei ai, LEE, and BASS et al. do not disclose or suggest initiating a 
reservation process, at a source node, the reservation process reserving at least a portion of a blocks 
of secret bi ts at each node along a path between the source node and a destination node; and 
employing the reserved blocks of secret bits in subsequent public communjcation between the 

source node and the destination node. The Exannner relies on column 6, lines 4.5-65 and column 7, 
lines 43-55 of BASS et a!, as allegedly disclosing diese features (Office Action, pg, 12). Applicants 
respectfttlly disagree with the Examiner's inteipretation of BASS et al. 

Column 6, lines 45-65 of BASS et al, has been reproduced above. This section of BASS et 
al. discloses that each node conuibutes its owr randotn number in generating session keys. This 
section of BASS et al, does not disclose or suggest initiating a reservation process, at a source node, 
the reservation process reserving at least a portion of a blocks of secret bits at each node along a 
path between the source node and a destination node; and employing tlie reserved blocks of secret 
bits in subsequent public coinraiinication between the source node and the destination node, as 
recited in claim 25. 

Column 7, lines 4.^-55 of BASS et al. has been t«produced above. 11.iis section of BASS et 
ai . disc loses that a imique cross-domain pair is shared for each pair of nodes, so a compromise of 
one node does not operate io compromise the entire system. This section of BASS et al. further 
discloses that the actions of tlie nodes are symmetric such that each node mirrors the activity at the 
other nodes. This section of BASS et al, does not disclose or suggest initiating a reservation 
process, at a source node, the reservation process reserving at least a portion of a blocks of secret 
bits at each node along a path between the source node and adestinatii'!f n.nic employing the 
reserved blocks of secret bits in subsequent public cotnmunication between die source node and the 
destination node, as recited in claim 25, 

The disclosures of BENNEIT et al and LEE do not remedy the deficiencies in the 
disclosure of BASS et al. set forth above. 
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I- or ai ieasi the tbregomg reasons, Apphcams stibmrt thai daini 25 is patentable over 
BENNEIT et al , LfcE, and BASS et al., whether taken alone or in «mv reasoimble combmatioa. 

Claim 26 recites features similar to, yet possibly of different scope timn, features recited 
above with respect to claim 25. Therefore, claim 26 is patentable over BENNETT et ai., LEE, and 
BASS et al, whether taken alone or in any reasonable combination, for at least reasons similar to 
the reasons given above with respect to claim 25. 

Claims 27-29 and 32 rec ke features similar to, yet possibly of different scope tlian, features 
recited above with respect to claim 1 . Therefore, claims 27-29 and 32 are patentable over 
BENNETT et al, LEE, and BASS et al, whether taken alone or in any reasonable combination^ ibr 
at least reasons similar to the reasons given above with respect to claim 1 . 

in view of the foregoing remarks, Applicant respectfully request reconsideration and 
allowance of pending claims 1-24. 

If the Examiner believes that the application is not now in condition for allowance. 
Applicants respectfully request that the Examiner contact the undersigned to discuss any 
oatstanding issues. 
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Apphcam beheves no lee is due with this response other dia^i as indicaied in the enciosed 
Amendment Transmittal. However, if a fee is due, please charge our Deposit Account No. 18-1945, 
under Order No. BBNT~P0 1-258 from which the undersigned isanthorized to dmv. 

Dated; January 7, 2008 Respectfally sxibmittetl, 

/Michael J. Chasatv 
Michael J. Chasan 

Registration No.: 54,026 
ROPES & GRAY LLP 
One Iiuemafional Place 
Boston, Massachusetts 021 iO 
(617)951-7000 
{617} 951-7050 (Fax) 
Attorneys/Agents For Applicant 
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